The DMZ

M'vy

11:00

Hmm. The site is "aimed at developers" and does not provide a public fron-end without registering

kalina

sounds like a site aimed at victims

Lighty

-4

Q: [1]: http://phytolyft.com/5x-trim-600/

5X Trim 600 For many people, portion control may be the biggest hindrance. It is the only real complaint among my friends and co-workers. These people give to eat all the right foods nevertheless struggle with their Weight Loss Reviews. Portion control a lot important than anything . Training you...

authentication

M'vy

Trying to flag, but proxy

so

slow

kalina

I was too slow, it's already been deleted

my slowness was because I am reading an article on how emoji are taking over the world

M'vy

@kalina argh

kalina

11:05

TAKING OVER THE WORLD

meta.se -> pls we need emoji button in chat thx

M'vy

@kalina you'd need a purple tentacle avatar for this first

kalina

I did the right thing and I purchased some chocolate flavored lip balm

at least I purchased something today even if I fail at my main objective

kalina

11:33

.oO( Alice DJ - Better Off Alone )

Matthew

@kalina Not cherry and chocolate?

kalina

well I have cherry

Matthew

/me points at star wall. Mmm, chocolate gateaux

kalina

I'm trying to find some new clothing for the summer

this is going to be literally an all day activity at this rate

Matthew

I would like to point out that the girl with cherry and chocolate chapstick that I kissed was not, as far as I'm aware, @kalina. As may be evidenced by the previous lack of chocolate flavouring. Before someone suggests it. I know you lot...

kalina

11:37

they're all thinking it

Journeyman Geek

@kalina black T shirts. Preferably 2 sizes too large.

kalina

@JourneymanGeek I'm not disagreeing because I like lounging around in oversized tops but black? I'm going to be in direct sunlight, I'm thinking more lightweight

Journeyman Geek

@kalina black.

kalina

you're such a nerd

Rоry McCune

Black T-Shirts FTW

along with hoodie of course

kalina

11:45

a collection of bikinis, several pairs of pants and a variety of loose fitting white tops

how boring

Rоry McCune

well it is traditional for hotter climates

kalina

I need some hats as well

Matthew

theguardian.com/science/2012/aug/19/…

kalina

do I want some hats or do I want one hat that will be the hat of 2016

Rоry McCune

kalina

11:50

@RоryMcCune that's not suitable, last year I burned quite badly and got sunstroke

Adi

I had no idea that this is a thing.

Mark Buffalo

@AviD WHAT

kalina

@Adi old, even I knew about that

gold tag badge = mod hammer for close votes

Matthew

@Adi I was thinking the same. Then I went to find out how you get a gold tag badge...

Rоry McCune

grrr ebay

kalina

11:52

@RоryMcCune that's not even an image

SEJPM

@kalina only for dupes

Matthew

@RоryMcCune Bad @RоryMcCune, stealing ebay's holding image!

Rоry McCune

kalina

@SEJPM did I not say dupes? Obviosly I don't care enough

@RоryMcCune if I was a baseball cap kind of person I'm sure I'd already own something like that

but I don't play baseball

Mark Buffalo

@RоryMcCune I'm just glad you didn't hotlink from the wrong site :o

Stu W

11:54

kalina

sigh

Adi

@StuW wtf

Mark Buffalo

@StuW ?

Stu W

most inappropriate hat for summer

AviD

@MarkBuffalo what what

Adi

11:56

@Matthew I need to get a golden tag badge for something

Mark Buffalo

@AviD I am having trouble understanding what you mean. Last night was a blur, though

kalina

@Adi I meet the vote requirement for Fallout-4 on arqade but not the post requirement

Matthew

@Adi I need 4 more questions with a <tag>passwords</tag> to get a bronze...

Adi

@kalina I seem to be having a similar issue with a few tags

kalina

@Matthew [ tag : password ] ?

@Adi I have no motivation to post crap to get my post count up to the level and games don't usually new questions after a few months of release

so I'll never get it

Matthew

11:59

passwords possibly

Yes :-)

Am nowhere near the post requirement for the other levels

kalina

12:11

what is this new feature in Windows 10 that compresses allocated but not in use RAM?

Simon

@tylerl wat

Rоry McCune

@Simon pls simone , canuckistan, where you live

Simon

pls

Rоry McCune

@Simon you realise that once President Trump is in power, he'll make your gov change the country name to that

Matthew

@RоryMcCune I saw an article claiming that Google searches for "how to move to Canada" were up massively from the US...

Rоry McCune

12:22

@Matthew I've saw that this mornin' seems legit as the republican party have less than two weeks to work out how to stop him...

Matthew

@RоryMcCune They're a bit late for that... Wouldn't the UK method be for the party to disown the person?

Rоry McCune

@Matthew yeah the 'murican system is kind of weird, given someone who's never held office with a party can still get on the ballot to be their nominee for president

it'd be like Farage getting himself on the ballot for next leader of the Conservative party

Matthew

@RоryMcCune Yeah... But the US system is a bit broken anyway, since it appears to be run by the two main parties

AviD

Election Day - SMBC Theater

►

you mean "two main brands"

Simon

@RоryMcCune He can try but I think he'd end up realizing that Canadians are not so nice after all.

Rоry McCune

12:28

@Matthew well for quite a while the UK had a similar duopoly going, with the LDs nipping at their heels... the rise of SNP and UKIP have changed that a bit

Simon

@RоryMcCune Why are you talking about LSD?

Rоry McCune

@Simon pls simone I didn't realise you suffered from dyslexia

Simon

@RоryMcCune From a friend who may genuinely be dyslexic but never got tested: "Why did they spell "dyslexia" like that? It's like laughing at people who suffer of it".

Rоry McCune

@Simon I did think that as I went to google to check the spelling 'cause I can't get it right :)

Simon

lulz

Journeyman Geek

12:33

@Simon IKR?

is dyslexic

Simon

@Ohnana I read this yesterday. The author kept repeating certain parts right after he typed them and missed a ton of past tense e.g. "suppose" should have been "supposed" but in general, it was a good read.

@JourneymanGeek How severe?

Journeyman Geek

@Simon most people don't notice, outside me tending to recheck my work a few times.

I tend to use spellcheck a lot

Simon

@JourneymanGeek A ton of people aren't dyslexic and can't live without one so that's fine.

Journeyman Geek

and really, its something you can work with

I just work more visually than most people when taking notes for example, and I do better 'oldschool' on paper

Mark Buffalo

12:53

@Matthew My search begun last year

;)

Simon

@JourneymanGeek I still work with paper daily, I don't like taking notes on any electronic device.

M'vy

@Simon well you can't use a proper fountain pen on electronic device

Simon

@M'vy Hehe.

Mark Buffalo

@Simon "Lexis" means "speech" in Greek, and in English, appending "dys-" to something can mean "bad." This was adopted from German. Together, it means "bad speech." Which is funny because the original adopters mixed up the Greek word for "read" with the Greek word for "speech."

Simon

@MarkBuffalo I'm not sure if @ThomasPornin is fine with the fact that you're stealing his job.

Mark Buffalo

12:59

No way could I take that job

I think the origins of the word Dyslexia are funny

They mixed up speaking and reading

M'vy

it's because it's not speaking per se, but rather the "way of speaking" or elocution.

Same goes with lexicon, lexeme, lexical...

they all can be used for speaking/reading/writing

Mark Buffalo

ah

are you greekenese, @M'vy?

Thomas Pornin

Also, most of imports of Greek terms in Western languages come from the adoption of Aristotelian philosophy by the scholastics in the 12th century. Aristotle uses lexis for group of words both in speaking and writing.

Adi

Morning

M'vy

Ah. Aristotle.

@Mark I'm not

Also WhyTF does my pages load quicker on IE than FF!

Mark Buffalo

13:14

@M'vy Magic

Is this Edge, or plain IE?

M'vy

IE 10

I blame the proxy or the IT

or both

Mark Buffalo

ok, hm

Does your IE have any addons?

SEJPM

@M'vy WTF WHY ARE YOU STILL USING IE 10!?

it's like using WinXP

M'vy

@SEJPM cause it don't properly push updates here :S

Mark Buffalo

1

Q: John McAfee's Explanation of iOS Hack

I'm referring to this YouTube video, and further comment from John: I hope everyone knows that the Apple explanation was VASTLY dumbed down for the press. I know the A7 system chip well, including its secure enclave with separate coprocessor that stores the encrypted fingerprint, the ep...

encryption file-encryption ios

@SEJPM Used 8 until recently. :\/\/\/

SEJPM

13:17

@MarkBuffalo Win 8 or IE 8?

Mark Buffalo

@SEJPM IE

Not here. Previous thing

I ended up installing a virtual machine with Linux and firefox

SEJPM

@MarkBuffalo did you stop before EOL of IE 8?

@M'vy complain?

Mark Buffalo

@SEJPM nope

edge is horrible though

Matthew

@RоryMcCune Don't think we ever got them to run the elections though...

Mark Buffalo

I just can't stand the look of it

M'vy

13:21

@SEJPM Maybe I should force the updates...

Mark Buffalo

@M'vy force it

If you can force it, do it

3

SEJPM

@MarkBuffalo D:

Mark Buffalo

there have been no really interesting questions on secse lately :(

SEJPM

@MarkBuffalo the quote is from an RT interview D:

@MarkBuffalo make one?

Mark Buffalo

I hate answering my own questions

It feels cheap

Simon

13:28

You've overflown with rep when you did that.

SEJPM

@MarkBuffalo wasn't suggestion to answer 'em, just suggesting to make some fancy ones

@Simon oh you mean the question where he got 100+ on question and answer?

Simon

@SEJPM Yep.

Mark Buffalo

@Simon 40% of my rep is lost to repcap anyway

44.256% to be precise

Journeyman Geek

@Simon @M'vy I love fountain pens but also, I do freeform, multi coloured notes, and it works better for me

SEJPM

@MarkBuffalo so you only got ~+1000 rep from that?

silverpenguin

13:32

wow never new there was a chat section for this site... 2000 rep clearly means nothing... hi guys

Mark Buffalo

no, I gained like 200-300

M'vy

@JourneymanGeek yeah, with pen you have to commit to the colour for sure.

SEJPM

@MarkBuffalo so you hit the rep cap immediately and then nobody cared about your Q&A the next day?

Mark Buffalo

@SEJPM for the most part, yes. I was already near rep-cap when I posted it

M'vy

You know nothing John Penguin :)

diagprov

13:33

@MarkBuffalo It's not such a bad thing if you have a question you think others might need the answer to and you can give a good answer.

M'vy

Also welcome

Journeyman Geek

@M'vy and its a way to context switch I guess

Mark Buffalo

data.stackexchange.com/security/query/84763/…

@SEJPM Maybe we can team up and do a Q&A right now on something I find interesting? d:

SEJPM

@MarkBuffalo sure? proposals?

Mark Buffalo

hmm. let me think

M'vy

13:35

@silverpenguin I was sure I saw you here someday. But maybe not.

silverpenguin

@M'vy

Mark Buffalo

how about, "What is a reliable method of protecting detecting random breaches?"

SEJPM

@silverpenguin come back when you're a bear with 400k+ :D

silverpenguin

ffs... hit the enter... nah never been here before

Mark Buffalo

I have a sure-fire way to do it in a large majority of cases

but wait

silverpenguin

13:36

@SEJPM Do I have to be a bear? are other animals on offer?

Mark Buffalo

@SEJPM Essentially, I want to touch down on the topic of detecting when a company whose services you're using is breached

SEJPM

@silverpenguin bear is actually already occupied by @ThomasPornin aka @TomLeek

Mark Buffalo

so you know your data is fudged and can take appropriate steps before it's even announced in the news

silverpenguin

@SEJPM Then i call a manatee, the majestic sea cow

Mark Buffalo

so far I've detected like 40 breaches this way

OPM, IRS, Pizza Hut, and so on

SEJPM

13:37

wouldn't that be "too broad"?

Mark Buffalo

it kind of is, but you can use one simple trick to do it

maybe, "is it possible to detect when your data is breached before it's announced by the company who provides the services?"

silverpenguin

who else is currently on this and ignoring their day jobs? p.s. how many of you guys in here are pentesters?

SEJPM

@MarkBuffalo "Is it possible to forecast security breaches as a user?"

Stu W

have an individual phone number and email address per account?

Mark Buffalo

@SEJPM That sounds good

Stu W

13:40

or just email address

SEJPM

@StuW that's soooooooo much work D:

Mark Buffalo

@StuW That's pretty much the gist of it

Simon

There's no magical way without any other service to make /etc/hosts automagically support subdomain wildcards, right?

SEJPM

@Simon on windows or unix?

Simon

Like in a single entry both point pls1.wot pls2.wot to the same IP.

@SEJPM pls /etc/hosts

Stu W

13:41

@SEJPM if you run your own mailserver / domain or put +<company> after your gmail account then it isnt too bad

Matthew

@MarkBuffalo "This one simple trick to protect your data was discovered by a grandmother, and you won't believe how effective it is" Go Buzzfeed!

Mark Buffalo

@Matthew It's kind of like that, but if it's an interesting topic for researchers

Simon

I'll stop being lazy and will just add both entries, whatevs.

Stu W

"Security professionals hate this one cool trick discovered by a <geoip_lookup> single mom"

silverpenguin

"single mums looking...actually nvm its not buzz feed

Simon

13:44

@StuW Is your mom single? ( ͡° ͜ʖ ͡°)

silverpenguin

hey guys i am honestly interested in what you guys do? im assuming you are all in security or mostly anyway?

SEJPM

@silverpenguin i'm not :D

Stu W

@simon Nope lol

@silverpenguin im a relatively junior pentester

Simon

@StuW Good for her, son.

silverpenguin

@StuW thats what i am waiting for a job offer for.... I have to wait 2 weeks though as well as soon start my OSCP trainning and @SEJPM what do you do ?

Matthew

13:46

@silverpenguin Security consultant and/or problem solver, but not of the "this person needs to be removed" type

silverpenguin

I am currently a system developer :( the other side of the line!

diagprov

@MarkBuffalo I don't understand. "I'm not trying to get encrypted data". Well then, you're not really helping, are you?

Stu W

@simon could have joked that she was dead but didn't feel like it today

Simon

@StuW Thanks for not feeling like it.

Mark Buffalo

@diagprov I think he wants to crack it

@SEJPM gonna ask it? d:

silverpenguin

13:47

@Matthew the person who needs to be removed? xD and whats your background then? ex developer? systems arch?

SEJPM

@MarkBuffalo writing it right now

I need some time to formulate properly and not get closed as too broad

diagprov

@MarkBuffalo The only thing I can see that he's saying is that he could replace the coprocessor and therefore not need Apple's help in a brute force. I'm assuming the reason the FBI are asking Apple is because it is much easier for Apple to do this than for them.

Stu W

@silverpenguin OSCP is good fun - currently doing it but struggling to find the time on top of work / life

silverpenguin

@SEJPM my questions always get closed T__T i cant ask a question to save my life... I might as well encrypted it, I would probably get an up vote for trying

Simon

@silverpenguin Where are you from?

Stu W

13:49

@silverpenguin CRT is worth getting if you are UK based too

Matthew

@silverpenguin "problem solver" is slang for a member of a Mafia who kills people

Simon

He's not UK based for sure.

SEJPM

@silverpenguin you have 13 question 1 one of which is closed

@MarkBuffalo "So what can I, a normal user, do to minimize the effects of security breaches or maybe even forecast them? And if I'm somewhat certain that there was a security breach, that didn't hit media yet, what should I do?" - too broad?

silverpenguin

@StuW thats my trouble... work life T__T and i also study japanese and teach trainning... @SEJPM I am from the UK and I delete them when they get to much negatives I dont want to look dumb... amd @Matthew oohhh i see can i call you vinnie?

Simon

wat you are from UK?

You didn't sound like a native English-speaker to me.

silverpenguin

13:51

@Simon yes, I am from the uk. my english is terrible though

Simon

lulz

diagprov

@silverpenguin It takes a while to get used to the idea of what a good question is, but it can be done :)

Mark Buffalo

@SEJPM Sec

diagprov

@silverpenguin codeblog.jonskeet.uk/2010/08/29/writing-the-perfect-question

silverpenguin

@Simon I often apoligise to people for my terrible english, then they ask where i am from...when i say england it confuses the hell out of them its great

Simon

13:52

@SEJPM That's broader than what used to be the broadest question of all time before you asked this question.

SEJPM

@silverpenguin just excuse for your terrible french :D

Simon

@silverpenguin Haha.

silverpenguin

yea I know, it bads. Lucky for me you don't have to have good english to be a programmer.

Rоry McCune

@silverpenguin but you're about to become a security tester?

Mark Buffalo

@SEJPM I was thinking of something along the lines of "Is it possible for an end-user to tell when their data is stolen by hackers?"

"Let's say I'm a security researcher interested in learning about breaches before they're announced. Is this possible to detect? It doesn't have to be 100%, it just needs to be somewhat reliable. It would also be nice to be able to take proper steps to protect my information before the breach is announced."

err, wait

M'vy

13:55

Let's say I'm a total lambda user

diagprov

@StuW Is that CREST?

silverpenguin

@RоryMcCune yes :( I know I have to write the reports. I can write reports with spell checking! I got a good grade back in university. I am moving from development to pen testing :3

SEJPM

@MarkBuffalo I didn't give you the whole question BTW, only the actual question part

Mark Buffalo

ah, ok

Rоry McCune

@silverpenguin yeah pen. testers have the delights of writing reports a lot. If you're lucky your new company will have some report writing tools to help a bit, generally the larger co's do.

@silverpenguin if you're very lucky they'll have some internal training to help with writing the rather formal variant of english that many test reports are written in

Matthew

13:57

Damnit @TomLeek - you type too fast!

Simon

@RоryMcCune After reading the SANS' introduction to Malware analysis from 2013 and criticizing the author's structure, grammar and the way he worded sentences, I think I'd be fine.

Rоry McCune

@Matthew never race the bear

Simon

#FancyNonEnglishNative

M'vy

That's very weird. I do have a 30s difference btw IE and FF loading times.

diagprov

@silverpenguin Did you grow up in the UK, or move for University and then stay for work?

Rоry McCune

13:59

@Simon heh, yeah it's not too difficult if you're used to writing formal'ish documents, and you get better quickly when you start writing one per week :)

diagprov

@Simon I keep forgetting, your native language is French right?

Simon

@RоryMcCune EVERY WEEK?!?

@diagprov Yep.

Rоry McCune

@Simon well I'd say my average test length is 1 week (perhaps even a bit lower) so yep, one report a week is average

diagprov

@Simon well every time you do a test, I guess. If you test one company a week...

Mark Buffalo

> If someone tried to explain signatures as a kind of encryption, then go find them and hit them in the teeth with a wrench, repeatedly. Tell them that they are unworthy, and I am disappointed with them

5

lmfao!!!!!!!!

Transcript for